SC-900 Describe the capabilities of Microsoft Entra Practice Question
You are designing an identity solution for a new company that will use Microsoft Entra ID. The company wants employees to use biometrics (fingerprint) on their mobile devices to sign in without typing a password. Which Microsoft Entra feature should you implement?
⚠ Common exam trap
Many exam-takers confuse Windows Hello for Business with mobile biometrics, but Windows Hello for Business is specifically tied to Windows devices and not to mobile phones or tablets.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Authenticator app (passwordless)
The Microsoft Authenticator app (passwordless) allows users to sign in to Microsoft Entra ID using biometrics (fingerprint, face, or PIN) on their mobile device without entering a password. This feature uses the device's built-in biometric capabilities to verify the user's identity, making it the correct choice for the described scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Hello for Business
Why it's wrong here
Windows Hello for Business is a robust credential management system designed specifically for Windows 10/11 devices, enabling strong user authentication through biometrics (face or fingerprint) or PIN. It provisions a user-specific, device-bound key or certificate for sign-in, eliminating passwords on the local device. However, it is an operating system feature integrated into Windows and does not extend its biometric capabilities directly to mobile operating systems like iOS or Android for cloud service authentication. Therefore, it cannot fulfill a requirement for mobile biometric sign-in.
- ✓
Microsoft Authenticator app (passwordless)
Why this is correct
The Microsoft Authenticator app provides a secure and convenient passwordless sign-in experience by leveraging the biometric capabilities (fingerprint or facial recognition) inherent to the user's mobile device. When a user attempts to sign in to an Azure AD-connected application, a notification is sent to the Authenticator app, prompting for approval using the device's native biometrics. This method securely verifies the user's identity on their registered mobile device, eliminating the need to type a password and enhancing security against phishing attacks. It directly addresses the requirement for mobile biometric authentication.
- ✗
SMS-based sign-in
Why it's wrong here
SMS-based sign-in allows users to authenticate by entering their registered phone number and then receiving a one-time passcode (OTP) via text message, which they then input into the sign-in prompt. While it offers a convenient method for multi-factor authentication or even primary sign-in, this approach relies solely on possession of the registered mobile device and knowledge of the OTP. It does not incorporate or leverage any biometric verification methods such as fingerprint or facial recognition from the mobile device itself.
- ✗
FIDO2 security keys
Why it's wrong here
FIDO2 security keys are physical hardware devices that provide strong, phishing-resistant authentication by generating cryptographic credentials. These keys typically connect via USB, NFC, or Bluetooth to a device and often incorporate their own biometric sensors (e.g., fingerprint readers) or PIN pads for user verification on the key itself. While highly secure, they are external hardware tokens and do not utilize the built-in biometric capabilities of a user's mobile phone for authentication to cloud services.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.